# .NET Published articles for .NET. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Background Jobs in .NET: Hangfire vs Quartz vs Wolverine vs BackgroundService DevFeed: [Background Jobs in .NET: Hangfire vs Quartz vs Wolverine vs BackgroundService]() Original publisher: [Read original article]() Author: Bharat Chandera Published: 2026-11-06T09:45:59Z Content type: comparison Language: en Sources: [DevOps.dev]() Topics: [.NET](), [Job](), [async]() Tags: [background-jobs](), [dotnet](), [hangfire](), [net](), [quartz](), [services](), [software-development](), [wolverine]() ### AI overview The excerpt distinguishes two background-work needs: a loop that runs for the lifetime of the app (such as polling a queue or pushing metrics) and work started by a request that must survive a process restart. It names BackgroundService, Hangfire, Quartz.NET, and Wolverine as tools that overlap but address different background-job problems. The excerpt ends before explaining their differences or offering selection guidance. ### Source excerpt Four tools, four different ideas of what a "background job" is. Here is how to pick without regretting it in six months. Continue reading on DevOps.dev " ## Build AI-Powered PDF Workflows in .NET MAUI with Smart PDF Viewer DevFeed: [Build AI-Powered PDF Workflows in .NET MAUI with Smart PDF Viewer]() Original publisher: [Read original article]() Author: Sumathi Uthayakumar Published: 2026-11-06T07:30:00Z Content type: tutorial Language: en Sources: [Syncfusion]() Topics: [.NET MAUI](), [pdf](), [Microsoft.Extensions.AI](), [NuGet]() Tags: [ai](), [ai-assistant](), [ai-pdf-redaction](), [ai-pdf-viewer-for-net-maui](), [ai-powered](), [azure](), [azure-openai](), [azure-openai-integration](), [build](), [form](), [how-to](), [integration](), [learn](), [maui](), [net](), [net-maui](), [net-maui-pdf-viewer](), [net-maui-smart-pdf-viewer](), [pdf](), [pdf-ai-assistant](), [pdf-smart-redaction](), [pdf-viewer](), [smart](), [smart-form-fill](), [with](), [workflows]() ### AI overview Syncfusion's .NET MAUI Smart PDF Viewer combines document summarization and question answering, AI-assisted sensitive-data detection and redaction, and form filling from clipboard or supplied text. The article shows Azure OpenAI setup through Microsoft.Extensions.AI, dependency injection, viewer settings, and Smart Fill calls; it also describes custom AI integration through IChatInferenceService. Basic PDF viewing needs no AI service, while the AI features do. Redaction detections may be incomplete and should be reviewed; applying redaction permanently removes selected content, so retain an original when needed. Smart Fill requires a PDF with form fields, and Android may need additional semantic-search model setup. The article lists Android, iOS, macOS, and Windows support. ### Source excerpt Learn how to build an AI-powered .NET MAUI Smart PDF Viewer with PDF AI Assistant, AI PDF Redaction, Smart Form Fill, and Azure OpenAI integration. ## November 2026 Patch Tuesday forecast: Old software continues to bite DevFeed: [November 2026 Patch Tuesday forecast: Old software continues to bite]() Original publisher: [Read original article]() Author: Help Net Security Published: 2026-11-06T07:00:48Z Content type: news Language: en Sources: [Help Net Security]() Topics: [cve remediation](), [snyk-security-intel]() Tags: [2014](), [2026](), [cve](), [cve-2026-96951](), [cves](), [cybersecurity](), [don-t-miss](), [expert-analysis](), [forecast](), [hot-stuff](), [microsoft](), [net](), [net-11](), [net-8](), [net-framework](), [news](), [november-2026](), [october](), [october-2026](), [opinion](), [patch](), [patch-tuesday](), [predictions](), [security](), [software](), [update](), [zero-day]() ### AI overview The article's practical takeaway is to patch actively exploited flaws promptly and keep removing obsolete software: even final-patched or abandoned apps can remain network-connected and expose systems. PHP2Shell (CVE-2026-109618/109619) was exploited before patches appeared; applying the fix requires replacing the PHP runtime and restarting the web server, since old code otherwise stays in memory. Microsoft's emergency Brotli-related .NET fix covered .NET 8, 9, 10 and .NET 11 RC3; proof-of-concept code existed, but the article reported no known in-the-wild exploitation. Microsoft also removed seven compromised certificate entries from Windows trust and said preview fixes for VPN failures and Smart App Control would enter the November cumulative release. Apple's October updates addressed many CVEs, including a backported iOS/iPadOS fix for a CoreGraphics flaw reportedly exploited against targeted individuals. The November release expectations for Microsoft, Adobe, Google and Mozilla are forecasts, not confirmed releases. ### Source excerpt How did you enjoy October 2026 Patch Tuesday? Were there enough CVEs reported to keep you busy for the rest of the year or are you finished and ready for another round next week? They released the regularly scheduled update nearly two and a half hours late, but Microsoft did resolve another record-breaking 1,407 unique CVEs. As in previous months, there were limited CVEs we needed to immediately deal with. In October, one zero-day CVE-2026-96951 ... More -> The post November 2026 Patch Tuesday forecast: Old software continues to bite appeared first on Help Net Security. ## Libghostty 1.0 DevFeed: [Libghostty 1.0]() Original publisher: [Read original article]() Published: 2026-11-06T00:00:00Z Content type: release Language: en Sources: [Mitchell Hashimoto]() Topics: [Terminal](), [Text-based user interface]() Tags: [abi](), [agentic](), [agentic-coding](), [ai](), [api](), [bare-metal](), [bash](), [bugs](), [build](), [c](), [c-plus-plus](), [emulation](), [ghostty](), [high-performance](), [library](), [net](), [release](), [stable](), [terminal](), [zig]() ### AI overview libghostty-vt 1.0 is a portable C terminal-emulation library extracted from Ghostty, with a stable ABI and semantic-versioning promises. Its API uses opaque handles, extensible getters and setters, and compatibility checks; CI checks ABI changes, and ELF builds version exported symbols. Releases include signed source and dependency tarballs for offline builds, standard packaging files, and platform-specific artifacts. The library is MIT licensed, has no runtime dependency beyond libc in its default configuration, and can be built freestanding with SIMD disabled. CI tests multiple operating systems and architectures; WebAssembly builds can omit selected features. It creates no threads, supports a customizable allocator, and the author reports running 10,000 active terminals on a four-core, 8 GB Linux server. The text lists adoption across IDEs, terminal tools, and other products, while noting overall usage estimates are rough. ### Source excerpt # Libghostty 1.0 `libghostty-vt` 1.0 is here. libghostty is a portable, high-performance C library for terminal emulation, extracted directly from the core of Ghostty. The 1.0 release means both the library itself and the C ABI are now stable. A little over a year ago, I wrote that libghostty is coming. At the time, the Zig module had just been merged, the C API didn't exist, and nobody but Ghostty was a consumer. ## Modernize your .NET apps for Windows Arm64 with GitHub Copilot DevFeed: [Modernize your .NET apps for Windows Arm64 with GitHub Copilot]() Original publisher: [Read original article]() Author: Mika Dumont Published: 2026-11-05T18:05:00Z Content type: tutorial Language: en Sources: [.NET Blog]() Topics: [.NET](), [GitHub Copilot](), [Windows]() Tags: [agent](), [ai](), [arm64](), [c-sharp](), [github-copilot](), [migration](), [modernization](), [modernize](), [net](), [upgrade](), [windows]() ### AI overview The GitHub Copilot upgrade agent assesses .NET projects migrating from Windows x64 or x86 to Windows Arm64, identifies architecture-specific code, unsupported native dependencies, package compatibility issues, and configuration blockers, then proposes a codebase-specific plan and helps update code, dependencies, and project settings with developer review. It can build migrated components; runtime testing depends on access to matching Arm64 hardware or CI runners. A successful build alone does not validate runtime behavior, so validation on Windows Arm64 is still needed. The scenario targets portability and correctness, not Arm64 performance tuning; performance can be measured separately after validation. ### Source excerpt Modernize your .NET apps for Windows Arm64 with the GitHub Copilot upgrade agent, from identifying migration blockers to planning and making code changes. The post Modernize your .NET apps for Windows Arm64 with GitHub Copilot appeared first on .NET Blog. ## 5-minute demo: How to build modern applications with Red Hat OpenShift DevFeed: [5-minute demo: How to build modern applications with Red Hat OpenShift]() Original publisher: [Read original article]() Author: Jaafar Chraibi; Colleen Corrice Published: 2026-11-05T00:00:00Z Content type: article Language: en Sources: [Red Hat Blog]() Topics: [Cloud Architecture](), [remote-development](), [Cloud & Application Security](), [redhat](), [Continuous Delivery (CD)]() Tags: [acceleration](), [application-delivery](), [application-development](), [application-platform](), [applications](), [base-images](), [browser](), [containers](), [demo](), [development](), [edge](), [enterprise](), [net](), [openshift](), [red-hat-openshift](), [security](), [security-and-compliance](), [software](), [speed](), [teams]() ### AI overview Red Hat OpenShift combines developer tools, platform security, and operational controls to support application delivery across cloud, datacenter, and edge environments. Its described capabilities include browser-based Dev Spaces and templates for launching and editing applications; curated container images with a Health Index for security grading; OpenShift Virtualization for running VMs alongside containers in a project namespace; an embedded marketplace for deploying certified extensions with lifecycle updates; and OpenShift Service Mesh for traffic visibility, tracing, and canary routes. The text presents these as ways to speed development, support incremental modernization, and manage applications. It describes a five-minute interactive demo, but does not provide its contents. ### Source excerpt Building and deploying enterprise applications is no longer just about launching containers--it's about managing the entire software lifecycle with a focus on security, intelligence, speed, and predictability. As a result, modern development teams must meet a dual imperative: Deliver new features on pace with business needs while adhering to rigorous security and compliance standards across public clouds, on-premise datacenters, and edge environments.To help you meet your current needs as you prepare for the future, Red Hat OpenShift continues to evolve and reimagine application delivery. B ## Your .NET parallel loop can become serial in a one-CPU container DevFeed: [Your .NET parallel loop can become serial in a one-CPU container]() Original publisher: [Read original article]() Author: Guilherme Appel Published: 2026-11-04T16:34:13Z Content type: opinion Language: en Sources: [Stack Overflow]() Topics: [Concurrency](), [Distributed Systems & Parallel Computing](), [rate-limiting]() Tags: [ai](), [api](), [backpressure](), [budget](), [building-software](), [capacity](), [cc-by-sa](), [concurrency](), [container](), [contributed](), [cpu](), [dependencies](), [i-o](), [net](), [parallel](), [serial](), [service]() ### AI overview In the lab, a one-CPU container cut the default Parallel.ForEachAsync concurrency from two records to one, nearly doubling the median time for 200 records from 42.1 to 83.6 seconds. The CPU-based default can constrain I/O work because it waits on a CPU-derived limit even while records await services. Raising the loop limit can restore concurrency but may overload downstream systems; a shared semaphore also cannot reserve capacity for a more fragile dependency, and it does not enforce rate quotas. The article recommends shared, explicit per-dependency concurrency budgets, configured to service capacity, with enough records in flight to meet throughput goals. In simulated tests, a six-write-permit budget eliminated HTTP 503 rejections when the write service slowed, while shared or absent limits produced 57-64; the per-dependency setup was slower in healthy runs and achieved about 0.82 of shared-pool throughput when enrichment slowed. These results describe simulated services. The article also recommends startup validation, per-service in-flight monitoring, separate call and permit-wait deadlines, and measurements under actual container CPU limits. ### Source excerpt CPU-based defaults can leave an I/O-heavy loop processing one record at a time. Raising the limit helps, but each downstream service still needs a concurrency budget it can handle. ## Open source as a research method DevFeed: [Open source as a research method]() Original publisher: [Read original article]() Author: Daniel Lemire Published: 2026-11-04T12:48:24Z Content type: opinion Language: en Sources: [Daniel Lemire]() Topics: [Open Source](), [Node.js]() Tags: [ai](), [ai-tools](), [algorithm](), [browsers](), [bug](), [bug-reports](), [bun](), [c-plus-plus](), [code-reviews](), [deno](), [github](), [go](), [net](), [open-source](), [research]() ### AI overview The author argues that open source can make building a research method: working software attracts real users whose bugs, unusual inputs, hardware and workloads expose research problems. The article traces this path through simdjson, whose JSON parsing work led to faster floating-point conversion via the Eisel-Lemire algorithm and then to simdutf for UTF-8 validation and transcoding. The author says those projects reached production use and that user contributions and code reviews provide demanding feedback. They also report that AI tools appear to make it easier for people to understand unfamiliar code and contribute fixes. These are the author's observations and examples, not a general comparison of research methods. ### Source excerpt Many people still picture innovation as a line. The professor thinks and publishes. The engineer reads the paper and designs a product. The customer consumes it. It rarely works that way. The industrial revolution was not set off by professors writing papers. It was driven by demand for cheap and better clothing for the masses. ... Continue reading Open source as a research method ## SlippyNunchucks hijacks Sogou Input Method's brand promotion mechanism to distribute malware DevFeed: [SlippyNunchucks hijacks Sogou Input Method's brand promotion mechanism to distribute malware]() Original publisher: [Read original article]() Author: Anh Ho Published: 2026-11-04T09:55:00Z Content type: news Language: en Sources: [WeLiveSecurity]() Topics: [Malware](), [DLL hijacking](), [ESET research]() Tags: [2](), [2016](), [2021](), [2023](), [2025](), [2026](), [brand](), [communications](), [dns](), [dns-hijacking](), [eset](), [eset-research](), [hijacking](), [http](), [input](), [malware](), [mechanism](), [net](), [promotion](), [research]() ### AI overview SlippyNunchucks used DNS hijacking to redirect Sogou Input Method's insecure HTTP request for branded dictionary icon configuration to attacker-controlled servers. The malicious configuration directed SGTool.exe to download DarkVigil payloads and place them where Sogou's existing component workflows would execute them, providing persistence without a separate mechanism; the authors say both execution paths could disrupt the software. The DNS manipulation point remains unknown. Tencent's version 16.10 migrated affected requests to HTTPS and enabled certificate pinning. ESET observed targets in Hong Kong, Thailand, Japan, Vietnam, Oman, and Sri Lanka. The excerpt also describes DarkVigil's DMTP-based command and control, including reverse RPC and plugin orchestration. ### Source excerpt ESET Research analyzes a DNS hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method ## DiscImageStudio: burn visible artwork onto CDs, DVDs and Blu-ray discs #ArtTuesday DevFeed: [DiscImageStudio: burn visible artwork onto CDs, DVDs and Blu-ray discs #ArtTuesday]() Original publisher: [Read original article]() Author: Anne Barela Published: 2026-11-03T19:27:53Z Content type: release Language: en Sources: [Adafruit Industries]() Topics: [Image processing](), [Tool](), [Image]() Tags: [arttuesday](), [artwork](), [blu-ray](), [burn](), [burner](), [cd](), [cds](), [data](), [discimagestudio](), [emulation](), [experimental](), [export](), [github](), [gpl](), [image](), [layer](), [layers](), [linux](), [net](), [pattern](), [picture](), [surface](), [tool](), [vintage-computing]() ### AI overview Disc Image Studio converts an image into a burn pattern visible on a disc using an ordinary burner. It supports CDs, DVDs and single-layer BD-R. Windows has a win-x64 executable; Linux and macOS have experimental command-line builds, and both packages include a .NET runtime. The workflow is to select a disc type, import and arrange an image, tune dithering and image levels, then preview the result. Users can export ISO, RAW or WAV+CUE files, or burn directly; direct burning is experimental, so the excerpt advises using a disc you can afford to lose. Assisted calibration helps correct visibly curved radial lines in a crosshair test pattern. The excerpt identifies the project as GPL-3.0-or-later and says it builds on CD interleaving code from arduinocelentano's CDImage. ### Source excerpt JiaFeiMiao-K-Cat has released Disc Image Studio on GitHub, a tool that turns a picture into data that etches a visible image onto the surface of a disc. It works with CD, DVD and single layer BD-R media, using an ordinary burner. The trick is arranging the written data so the pattern of burned and unburned [...] ## Delivering Skills in NuGet packages DevFeed: [Delivering Skills in NuGet packages]() Original publisher: [Read original article]() Author: Richard Lander Published: 2026-11-03T19:00:14Z Content type: article Language: en Sources: [.NET Blog]() Topics: [Agent Skills](), [NuGet](), [Package Management](), [Frontier AI]() Tags: [agent-skills](), [ai](), [documentation](), [net](), [nuget](), [packages](), [skills]() ### AI overview NuGet packages can bundle `SKILL.md` files alongside library binaries, giving agents current, package-specific guidance after `dotnet restore`. The article demonstrates discovering skills with `dotnet-inspect` from a package or project graph, and copying direct-dependency skills into a repository with `dotnet-package-skills`; repository commits can keep copied skills available and reviewable, though maintainers must keep them in sync with package versions. Skills may improve answer quality or reduce token costs, but can also be ineffective or increase costs, so maintainers should evaluate them. The author reports stronger efficacy gains for weaker models and limited room to improve frontier models, and recommends testing with frontier models because a skill that helps one model can make another more expensive. Skills also introduce a threat vector through agent consumption of package markdown, so the article advises using packages from trusted maintainers. The supplied text is an article excerpt. ### Source excerpt Agent skills can be delivered in NuGet packages as a way to deliver up-to-date library documentation to models. The post Delivering Skills in NuGet packages appeared first on .NET Blog. ## Get Ready for .NET Conf 2026! DevFeed: [Get Ready for .NET Conf 2026!]() Original publisher: [Read original article]() Author: .NET Team Published: 2026-11-03T17:30:00Z Content type: news Language: en Sources: [.NET Blog]() Topics: [.NET Conf](), [.NET](), [Developer Events](), [ASP.NET Core](), [ASP.NET](), [.NET MAUI](), [C#]() Tags: [agentic-ui](), [agents](), [ai](), [asp-net-core](), [aspire](), [blazor](), [c-sharp](), [c-sharp-dev-kit](), [community](), [conference](), [copilot](), [debugging-and-diagnostics](), [developer-workflow](), [dotnet-cli](), [net](), [net-11](), [net-conf](), [net-conf-2026](), [net-maui](), [virtual-event](), [visual-studio]() ### AI overview .NET Conf 2026 is a free virtual event running November 10-13, with the official .NET 11 launch and two days each of Microsoft and community-led sessions. Microsoft sessions begin November 10 at 8 AM PST with a keynote on .NET 11 and Copilot and agents in .NET development; November 11 focuses on Visual Studio and developer deep dives. Topics include C#, ASP.NET Core and Blazor, .NET MAUI, AI tooling, debugging, and modernization. The November 12-13 Community Days are organized by volunteers and feature developers' project experiences; their agenda and viewing details are on dotnetconf.net. Microsoft's agenda and conference information are at dot.net/conf, where attendees can select a time zone and add sessions to their calendars. ### Source excerpt .NET Conf is one week away! Join us November 10-13 for the launch of .NET 11, two days of Microsoft sessions, and two days of Community Days. The post Get Ready for .NET Conf 2026! appeared first on .NET Blog. ## From PHP2Shell Alert to Action: Identify and Patch Your Workloads Using VMware Salt DevFeed: [From PHP2Shell Alert to Action: Identify and Patch Your Workloads Using VMware Salt]() Original publisher: [Read original article]() Author: rob robertson Published: 2026-11-03T13:00:00Z Content type: article Language: en Sources: [VMware]() Topics: [saltstack](), [workload protection](), [Deployment Strategies](), [alert triage](), [version]() Tags: [auto-remediation](), [avi](), [canary](), [cloud-infrastructure](), [compliance](), [configuration](), [configuration-management](), [cybersecurity-awareness-month](), [discovery](), [net](), [packages](), [patch](), [php](), [php2shell](), [repair](), [salt](), [security](), [verification](), [vulnerability](), [workers]() ### AI overview VMware Salt's PHP2Shell workflow connects managed-server discovery, approved PHP patching, mitigation of the separate session upload-progress advisory, worker replacement, and verification. It inventories Linux packages and, on Windows, combines package data with checks of runtime locations, services, and hosting configuration; vendor backports and approved overrides inform patch assessment. Operators can preview changes, apply repository or Winrepo packages, and disable the setting in declared startup INI files. Configuration checks gate service actions, and failed prerequisites remain visible. Reassessment, active-worker checks, application health tests, and scanner validation support closure. Network protections such as vDefend and Avi WAF can complement Salt but require separate configuration; automatic telemetry correlation is not provided. Containers and runtimes outside discovery scope need separate coverage, and customer-specific approval, integrations, recovery procedures, and compliance policies require implementation and assessment. ### Source excerpt A vulnerability alert starts the response. Salt helps carry it through discovery, approved repair, and verification--at scale, across your entire fleet. A critical PHP advisory lands. Security wants to know which systems could be affected. Operations need the right packages, the right configuration, and a safe way to replace running workers. Application owners need confidence ... Continued The post From PHP2Shell Alert to Action: Identify and Patch Your Workloads Using VMware Salt appeared first on VMware Blogs. ## Your New MTTR Shortcut -- Introducing Related Threat Context DevFeed: [Your New MTTR Shortcut -- Introducing Related Threat Context]() Original publisher: [Read original article]() Author: ANY.RUN Published: 2026-11-03T10:48:31Z Content type: release Language: en Sources: [HackerNoon]() Topics: [alert triage](), [Threat Hunting & Intel](), [Security Operations Center](), [threat detection](), [Threat Research]() Tags: [analysis](), [analyst](), [analysts](), [any-run-interactive-sandbox](), [any-run-threat-context](), [any-run-threat-intelligence](), [attack](), [behavior](), [blocking](), [context](), [good-company](), [industry](), [intelligence](), [investigations](), [iocs](), [mssp-threat-analysis](), [mttr](), [mttr-reduction](), [net](), [soc](), [soc-investigation-workflow](), [soc-time-to-triage](), [speed](), [team](), [threat-intelligence](), [threat-intelligence-context](), [triage]() ### AI overview ANY.RUN's Related Threat Context surfaces an IOC's prior team analyses, industry-associated activity, and ANY.RUN Threat Intelligence in the Interactive Sandbox, helping analysts decide whether to close, investigate, enrich, or escalate a case. Enterprise internal SOCs can access all three context types; MSSPs can access team and TI context, but not industry context. Analysts can follow related IOCs into Threat Intelligence Lookup to investigate linked samples, infrastructure, and behavior. "Never Seen Before" and "Commonly Seen" are prioritization signals, not verdicts, and an industry match is not proof of targeting. The feature can give Tier 2 a more actionable starting point and reduce repeated research, while analysts still need to weigh context alongside behavior and other evidence. ### Source excerpt Discover how ANY.RUN Related Threat Context connects IOCs to team investigations, industry observations, and threat intelligence to speed up SOC triage. ## Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware DevFeed: [Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware]() Original publisher: [Read original article]() Author: Anamarija Pogorelec Published: 2026-11-03T10:00:14Z Content type: news Language: en Sources: [Help Net Security]() Topics: [Malware](), [Remote Access Trojan](), [email]() Tags: [apt](), [city](), [courts](), [cve](), [cybersecurity](), [defense](), [email](), [exploit](), [initial-access](), [initial-access-broker](), [law-enforcement](), [malware](), [net](), [news](), [russia](), [russian-federation](), [stealer](), [threat-intelligence](), [ukraine]() ### AI overview ESET says Gorbag has targeted Ukrainian organizations since at least February 2025, including justice bodies, local councils, defense entities, and a transportation hub associated with foreign military aid. Its campaigns use business-themed spearphishing: macro-enabled Excel attachments in 2025, then RAR archives exploiting WinRAR vulnerability CVE-2025-8088 in early 2026 to place a startup shortcut and PowerShell loader. The group's BeautyStealer collects browser cookies and passwords, OpenVPN configurations, and selected files from user folders, removable media, and mapped drives; it then attempts to erase itself. ESET suggests Gorbag could be an initial access broker, but says later stages of any such chain remain unobserved. Before BeautyStealer, the group used a PowerShell reverse shell wrapped in .NET. ### Source excerpt ESET has been tracking a Russia-aligned group it calls Gorbag, which has been breaking into Ukrainian organizations since at least February 2025 using spearphishing attachments and a stealer that erases itself once the data is gone. Spearphishing email message from a compromised email sender (Source: ESET) Every target ESET identified sits in Ukraine. About a quarter are law enforcement and justice bodies, another quarter are local administrations, mostly city councils in areas close to the ... More -> The post Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware appeared first on Help Net Security. ## I Put My Country's Entire Legal Code in Git: 300,000+ Documents Since 1810 DevFeed: [I Put My Country's Entire Legal Code in Git: 300,000+ Documents Since 1810]() Original publisher: [Read original article]() Author: Maximiliano Morel Published: 2026-11-02T20:15:33Z Content type: article Language: en Sources: [HackerNoon]() Topics: [Git](), [version-control](), [search-engines](), [CI/CD]() Tags: [accessibility](), [actions](), [agents](), [ai](), [ai-agents](), [alternatives](), [android](), [api](), [api-key](), [apis](), [article](), [building](), [code](), [country](), [engineering](), [git](), [git-legal-history](), [github](), [hackernoon-top-story](), [law](), [legal](), [legal-corpus](), [legaltech](), [net](), [repo](), [user-friendly]() ### AI overview The project records Chilean legal publications in Git, with one commit per publication, so users can inspect laws and amendments as they stood on a given date. It builds a corpus from BCN's SPARQL catalog and LeyChile's norm and version data, then creates an amendment graph and Git history. The author reports roughly 358,000 cataloged norms, with about 339,000 placed in the main history builder. Git's directory and push limits required workarounds including compressed cache files, split commits, sparse checkout, and date handling for pre-1970 publications. A web interface, API, and read-only MCP server make the corpus searchable; search moved from Meilisearch plus Postgres to Postgres alone after Meilisearch's storage and memory costs and an outage exposed a reliability problem. Postgres uses separate typeahead and deep-search strategies, though common-word results can favor low-ID laws over relevance. Git serves as the history source, while the UI and search infrastructure provide practical access. ### Source excerpt Building a Git repo from the Chilean law: more than 300,000 legal documents in a corpus that reaches back to 1810. Lots of interesting engineering challenges. ## CVE-2026-63346 - Refitter: C# source injection through OpenAPI header parameter names DevFeed: [CVE-2026-63346 - Refitter: C# source injection through OpenAPI header parameter names]() Original publisher: [Read original article]() Author: CVEFEED.io; github.com Published: 2026-10-30T23:17:14Z Content type: news Language: en Sources: [Latest High/Critical Vulnerabilitiy Feed]() Topics: [C#](), [OpenAPI Specification](), [client library]() Tags: [2026](), [api](), [application](), [assembly](), [behavior](), [c-sharp](), [class](), [client](), [code](), [cve](), [cve-2026-63346](), [header](), [interface](), [library](), [name](), [net](), [net-8](), [openapi](), [parameter](), [source]() ### AI overview Before Refitter 2.1.2, an OpenAPI header parameter name was inserted unescaped into a Refit `[Header("")]` attribute. An attacker-controlled description could therefore inject valid C# into generated code; a `[ModuleInitializer]` could run the injected code when the compiled assembly loads at startup, even if the API client is never called. The excerpt says default validation does not block this path and notes that query `AliasAs` and enum/default value sinks are escaped. The behavior was verified with Refitter 2.0.0 and .NET 8; the issue is fixed in 2.1.2. ### Source excerpt CVE ID :CVE-2026-63346 Published : Oct. 30, 2026, 11:17 p.m. | 39 minutes ago Description :Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, the header parameter name in `parameters[].name` with `in: header` is emitted verbatim into a Refit `[Header("")]` attribute string without escaping quotation marks. An attacker-influenced OpenAPI description can pass default validation without `--skip-validation` and break out from the parameter-list position by closing the parameter and method syntax, attribute, interface, and namespace. The generated file can remain valid C# while containing a top-level file class with a `[ModuleInitializer]` method, which executes attacker code when the compiled assembly is loaded at application startup, even if the client is never called. Query `AliasAs` and enum/default value sinks are escaped; this flaw is in header-name attribute-string emission. The behavior was verified with Refitter 2.0.0 and .NET 8. This issue is fixed in version 2.1.2. Severity: 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... ## Everything released in October 2026 for Azure Developer CLI DevFeed: [Everything released in October 2026 for Azure Developer CLI]() Original publisher: [Read original article]() Author: Kristen Womack Published: 2026-10-30T19:02:14Z Content type: release Language: en Sources: [Azure SDK Blog]() Topics: [azd](), [Azure](), [Azure Developer CLI templates](), [CI/CD](), [azure container apps](), [AI Chat]() Tags: [2026](), [apis](), [azd](), [azure](), [azure-developer-cli](), [azure-sdk](), [cli](), [codespaces](), [container-apps](), [deploy](), [deployments](), [docker](), [environment](), [express](), [extension](), [go](), [infrastructure](), [java](), [javascript](), [kubernetes](), [net](), [october-2026](), [pipelines](), [preview](), [provisioning](), [python](), [sdk](), [stable](), [stored](), [typescript](), [vscode]() ### AI overview The October 2026 azd releases add read-only deployment previews for several Azure targets and image-based deployment to Container Apps express, which does not support multiple revisions or traffic splitting. The beta `azd env unset` removes exact, case-sensitive stored keys with confirmation; non-interactive use requires `--force`, and `AZURE_ENV_NAME` is protected. Pipeline generation now installs extensions required by extension-defined infrastructure providers. Extension APIs for deployment previews, telemetry, and Azure principal lookup reach stable v1, while structured predeploy/postdeploy messages remain beta. The releases also improve provisioning validation and cancellation handling, distinguish timeouts, and restore extension files and metadata after failed or cancelled upgrades. A breaking Go API migration makes environment and state path calls return errors, requiring callers to check and propagate them. ### Source excerpt The October recap for the Azure Developer CLI (`azd`). Preview service deployments before making changes, deploy to Container Apps express, remove stored environment values, and use extension-defined infrastructure providers in generated pipelines. Extension APIs gain stable contracts, and provisioning validation, cancellation, and upgrade recovery improve. The post Everything released in October 2026 for Azure Developer CLI appeared first on Azure SDK Blog. ## HybridCache vs IMemoryCache vs Redis in .NET: Which One Should You Actually Use? DevFeed: [HybridCache vs IMemoryCache vs Redis in .NET: Which One Should You Actually Use?]() Original publisher: [Read original article]() Author: Bharat Chandera Published: 2026-10-30T18:59:36Z Content type: comparison Language: en Sources: [DevOps.dev]() Topics: [.NET](), [Redis](), [Concurrency]() Tags: [benchmark](), [cache](), [caching](), [compare](), [concurrent](), [csharp](), [dotnet](), [fast](), [local](), [net](), [net-9](), [network](), [query](), [redis](), [serialization](), [services](), [software-development](), [speed](), [vs]() ### AI overview The excerpt identifies IMemoryCache as the fastest option for in-process caching: it stores object references without serialization or network calls, making hits dictionary lookups. Its stated limitation is no stampede protection, so concurrent requests can all miss when a hot key expires and repeat the underlying work. The article frames HybridCache as removing the rewrite cliff between local memory and Redis, but this excerpt does not provide enough detail to compare their behavior or requirements. ### Source excerpt Three caches, one decision tree, and a benchmark you can run yourself. Continue reading on DevOps.dev " ## The Good, the Bad and the Ugly in Cybersecurity - Week 44 (2026) DevFeed: [The Good, the Bad and the Ugly in Cybersecurity - Week 44 (2026)]() Original publisher: [Read original article]() Author: SentinelOne Published: 2026-10-30T17:29:33Z Content type: news Language: en Sources: [Cyber Newsroom](), [SentinelOne]() Topics: [Cybersecurity](), [known exploitable vulnerabilities](), [cybersecurity and infrastructure security agency](), [Incident response]() Tags: [2026](), [22](), [added](), [agencies](), [all](), [also](), [applications](), [brotli](), [complexity](), [cyber](), [cyber-news](), [cybersecurity](), [exploitation](), [firewalls](), [fragnesia](), [good](), [net](), [node2shell](), [php2shell](), [root](), [the-good-the-bad-and-the-ugly](), [weekly](), [with]() ### AI overview Broad automated exploitation of PHP2SHELL has been limited by the need to tailor memory-layout and request-stream conditions to each PHP environment, though targeted compromises have occurred. Attackers have chained PHP2SHELL with the Fragnesia Linux kernel flaw: a web shell provides local access, then Fragnesia can escalate to root. The excerpt reports 25 rooted PAN-OS firewall or management servers and says patching only one flaw leaves the other attack path open. Separately, Brotli versions 1.0.3-1.2.0 have an out-of-bounds write flaw affecting runtimes including Node.js, Python, and .NET. The underlying code was silently fixed upstream before public disclosure; later ecosystem patches and edge mitigations followed. Edge filtering does not cover outbound client requests or file-based attack paths, so remediation requires upgrading Brotli and rebuilding affected applications. ### Source excerpt PHP2SHELL's complexity stalls mass exploitation, attackers chain it with Fragnesia to root firewalls, and a silent Brotli fix leaves Node2Shell exposed. ## Compromised eMudhra Certificates: Update Your JetBrains IDEs, ReSharper, .NET Tools, Toolbox App, and Gateway Now DevFeed: [Compromised eMudhra Certificates: Update Your JetBrains IDEs, ReSharper, .NET Tools, Toolbox App, and Gateway Now]() Original publisher: [Read original article]() Author: Ilya Petrov Published: 2026-10-30T15:24:48Z Content type: news Language: en Sources: [JetBrains]() Topics: [jetbrains-toolbox](), [jetbrains](), [IntelliJ IDEA](), [resharper](), [.NET]() Tags: [2025](), [all](), [app](), [certificates](), [clion](), [contain](), [emudhra](), [fixed](), [gateway](), [goland](), [hotfix](), [ide](), [idea](), [ides](), [jetbrains](), [jetbrains-ides](), [net](), [net-tools](), [news](), [pycharm](), [resharper](), [resharpercplusplus](), [rider](), [rubymine](), [rustrover](), [security](), [toolbox](), [toolbox-app](), [tools](), [update](), [webstorm]() ### AI overview Eight compromised eMudhra intermediate certificate keys could let a network attacker impersonate websites or services JetBrains tools connect to. JetBrains IDEs, Toolbox App, Gateway, and ReSharper rely on the bundled JetBrains Runtime trust store; IDEs also use JCEF, and Toolbox App and IDEs run `jetbrainsd` with a separate certificate list. Operating system updates alone do not fix these issues. Update each product to its listed fixed version; IDEs from 2025.1 and earlier and Toolbox App 3.7 and earlier require upgrading to a supported release. The 2025.2.6 IDE updates fix JBR but need a separate JCEF hotfix; until then, disable JCEF, which affects previews, notebook output, and potentially some plugins. If updating is delayed, the document gives steps to use a cleaned certificate store and, separately, update `jetbrainsd` to 0.9.9728 or later. JCEF can remain unprotected when Google update servers are blocked, and project JDKs and runtimes such as Node.js, Python, or Go have their own trust stores. ### Source excerpt Summary Available fixed versions The issue is fixed in the following versions: The 2025.2.6.* updates for all IDEs now contain only the JBR fix. They will get a separate hotfix for the JCEF problem. Until then, use a workaround to disable JCEF in your IDE (see instructions below). IDE versions 2025.1 and earlier, and Toolbox [...] ## Convert cloud-native code from Azure to AWS with AWS Transform DevFeed: [Convert cloud-native code from Azure to AWS with AWS Transform]() Original publisher: [Read original article]() Author: David Topchyan Published: 2026-10-29T21:20:52Z Content type: tutorial Language: en Sources: [.NET on AWS Blog]() Topics: [AWS Transform](), [Amazon Web Services](), [Azure](), [.NET](), [Serverless](), [azure functions]() Tags: [amazon-bedrock](), [amazon-dynamodb](), [amazon-s3](), [amazon-sqs](), [aws](), [aws-eventbridge](), [aws-iam-identity-center](), [aws-lambda](), [aws-secrets-manager](), [aws-transform](), [azure](), [azure-cosmos-db](), [azure-functions](), [azure-sdk](), [cloud](), [cloud-native](), [code](), [kiro](), [migration](), [net](), [sdk](), [uncategorized]() ### AI overview AWS Transform for .NET can identify Azure SDK code in .NET applications and convert supported service paths to AWS equivalents. The walkthrough transforms an Azure Queue-triggered Function that writes to Cosmos DB into an SQS-triggered Lambda writing to DynamoDB; the generated code uses a conditional write to preserve insert-only behavior and reports failed SQS records for retry. The article says supported conversions are well tested, with Cosmos DB to DynamoDB in preview. Other Azure services can be requested, but those conversions are best effort and require careful review. A second example customizes the plan to move Cosmos DB to S3 for storage consolidation and requests additional migrations, then uses Kiro to complete, deploy, and test the application. The IDE walkthrough requires Windows, Visual Studio 2026, the AWS Toolkit, AWS Transform setup with IAM Identity Center credentials, and an Azure .NET application; other AWS Transform interfaces are also available. ### Source excerpt Introduction When you bring a cloud-native application over to AWS from another cloud, it may contain code that uses another cloud's SDK. AWS Transform for .NET can convert code from Azure cloud-native applications to use equivalent services from AWS, helping accelerate the migration. In this post, we'll take you on a tour of converting Azure [...] ## A quiet week in infosec \<. DevFeed: [A quiet week in infosec \<.]() Original publisher: [Read original article]() Author: William Largent Published: 2026-10-29T18:00:00Z Content type: opinion Language: en Sources: [Cisco Talos Blog]() Topics: [Threat monitoring](), [alert triage](), [PSR-4: Autoloader](), [Memory Safety]() Tags: [account](), [actions](), [ai](), [api-keys](), [attack](), [branch](), [brotli](), [browser](), [c2](), [cisa](), [code-execution](), [command-and-control](), [compromise](), [credentials](), [infosec](), [net](), [newsletter](), [node-js](), [php](), [threat-source-newsletter]() ### AI overview The newsletter's practical takeaway is to build response readiness before the next vulnerability headline: know which systems and versions you run, who owns them, how exposed they are, and what identities can do. Verify that fixes reach the intended systems; assign an owner and deadline to systems that cannot yet be patched, reduce their exposure, and monitor them until remediation. It also reports Cisco Talos's discovery of NIK C2, a Go-based Windows implant described as using an integrated OpenAI model to analyze stolen data during an attack, alongside credential dumping, keystroke streaming, and screen-locking ransomware. The text recommends monitoring for unusual local proxy routing, unexpected PowerShell use, and unauthorized access to browser databases or crypto wallets; it points to a separate blog for ClamAV signatures and indicators. Other headlines include exploited PHP vulnerabilities and a Brotli decoder flaw affecting packages across several ecosystems. ### Source excerpt In this edition of the Threat Source newsletter, William explores how PHP has taken over the conversation, Node.js has joined in, but underneath it all, there are still good people doing good work. ## Why Most of What You Build Creates No Value DevFeed: [Why Most of What You Build Creates No Value]() Original publisher: [Read original article]() Author: Dr Milan Milanović Published: 2026-10-29T16:01:25Z Content type: article Language: en Sources: [Tech World With Milan Newsletter]() Topics: [Product Management](), [product mindset](), [feature bloat](), [experiments](), [AI Chat]() Tags: [2](), [3](), [about](), [accelerated](), [adoption](), [age-of-ai](), [agents](), [agile](), [ai](), [ai-coding-agents](), [ai-prompts](), [build](), [gmail](), [google](), [interview](), [lead](), [net](), [product](), [value](), [with]() ### AI overview The interview argues that most product ideas produce little measurable impact because users rarely change behavior, and teams often fail to measure launch outcomes. Itamar Gilad recommends evidence-guided development: set outcome goals, assess ideas by impact, cost, and confidence, validate assumptions through short experiments, and connect tasks to those steps. His Confidence Meter assigns more weight to rigorous tests, with post-launch data the strongest evidence; how much evidence is enough depends on an idea's cost and risk. He warns that AI-assisted coding does not remove the costs of shipping weak features or make launch-and-iterate a reliable learning method. AI can help analyze research, prepare experiments, and summarize interviews, but should not substitute for users or be trusted to draw broad conclusions from small samples. For engineers, he suggests starting with product teammates and asking what goal a project serves, what evidence supports its assumptions, and how to test them quickly. ### Source excerpt An interview with Itamar Gilad, former Gmail product lead at Google and author of Evidence-Guided. [Next page]()